Participant roles and the access levels they grant
Key Takeaway
Each participant role belongs to one object and sets the access a participant gets on that object's records. When a user gets access to the same record in more than one way, the most open access wins.
Participant roles are the building blocks of Compliant Data Sharing in Agentforce Financial Services. A participant role names the part a person plays on a record, such as Relationship Manager on an account, and sets the access level that person gets, such as Read Only or Read/Write. Firms use participant roles to share sensitive records one record at a time, without code. Sharing this way builds ethical walls between teams such as investment banking and capital markets.
How participant roles grant access
Compliant Data Sharing lets record owners and users with edit access give other users access to specific records by assigning participant roles. Each participant role belongs to one object and sets a default access level for that object, such as Read Only or Read/Write.
When you assign a user or a participant group to a record with a role, the system creates a participant record, which is a junction record linking the user, the participant role, and the record. Compliant Data Sharing can then give that user access to the record, even when that access goes beyond the org-wide defaults.